
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft
File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json)
Hash identifier: sty9AQdqgUcR0XajXz79r3fiHlZ0SE8mYas3iZcZUC0=
Subject key identifier: 2F:E9:E5:76:EE:92:8D:95:44:3A:0D:B7:9C:CB:AF:66:AF:31:AD:98
Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD
Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD
Certificate serial: 076B55E39B0F491FAC7A4E54134937005CE0CF94
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft
Manifest number: 0166
Signing time: Sat 28 Feb 2026 23:00:00 +0000
Manifest this update: Sat 28 Feb 2026 22:55:00 +0000
Manifest next update: Wed 04 Mar 2026 03:16:00 +0000
Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=)
2: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: 9D9syLI82U7OB/g9+OplAc7OzFr5HKy/d4YGR/WgXEA=)
3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=)
4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl
rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6b:55:e3:9b:0f:49:1f:ac:7a:4e:54:13:49:37:00:5c:e0:cf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD
Validity
Not Before: Feb 28 22:55:00 2026 GMT
Not After : Mar 4 03:16:00 2026 GMT
Subject: CN=2FE9E576EE928D95443A0DB79CCBAF66AF31AD98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:0d:4d:b1:e3:37:b9:ef:59:61:e4:a6:a0:
7e:a3:13:ec:2b:5e:71:e0:6a:a7:ba:b3:58:d3:72:
74:e2:51:1f:e3:d4:cb:f3:de:1a:1c:97:98:9d:bc:
c3:e8:e5:2a:1e:6d:e2:36:84:e2:84:5a:29:bf:57:
fd:ff:59:d8:e1:21:43:c9:96:fe:bc:52:ce:f9:1d:
db:82:14:72:cb:55:78:97:95:66:19:1f:f2:b8:fb:
c5:c5:f8:7b:cc:a9:0b:93:d7:8a:91:d6:44:51:01:
6b:58:27:ff:ac:e1:3f:78:22:69:fc:57:d5:6e:cf:
13:15:b1:01:5b:d3:06:ce:3f:b7:70:3a:f8:6c:31:
b7:51:c8:2e:67:91:ca:a7:9b:cd:02:0e:a8:87:f9:
89:07:f4:65:57:7d:4c:fd:a7:01:b6:09:25:f3:79:
31:e9:b1:3a:c4:20:a0:9b:9a:29:bf:11:1a:7a:7c:
bf:d0:79:ea:69:f8:c8:a2:bc:bb:11:93:99:96:2f:
ae:23:cf:90:1f:a3:30:6d:34:a0:ed:1e:4e:05:59:
14:d6:29:c0:83:f7:bb:e1:dd:ac:2b:cb:59:1f:e8:
df:e9:61:c6:c6:7a:1c:ca:ae:d7:9d:e3:2f:3c:64:
4b:16:8c:32:54:e9:6b:a2:84:ec:5d:e1:ab:7d:ec:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:E5:76:EE:92:8D:95:44:3A:0D:B7:9C:CB:AF:66:AF:31:AD:98
X509v3 Authority Key Identifier:
keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:df:cc:db:7c:2a:ac:39:46:ac:3d:89:5f:2d:80:63:0e:25:
8c:be:d6:e0:0e:2e:59:0d:bb:0b:c4:ce:c0:e3:c5:95:fa:6d:
c5:7a:13:f0:ac:c6:ac:73:98:88:58:7f:5b:74:75:40:7a:d9:
41:a9:cc:78:e4:e0:73:56:65:74:20:c6:ae:83:33:f0:e2:21:
4f:1e:a1:61:41:10:08:bd:bd:93:c3:7c:f0:e0:b7:ad:14:34:
26:80:c4:31:f6:98:b9:21:e1:e1:c3:ac:d6:1d:00:46:be:da:
08:dc:8d:25:0f:c6:46:f3:a0:3e:1d:1b:66:8e:07:65:b8:29:
cd:d0:4e:f7:fb:fc:61:36:fd:6a:97:b8:57:0c:1c:7f:9d:52:
6c:6a:5d:05:78:54:59:a1:b8:61:ef:00:a3:30:23:88:08:65:
de:68:be:0d:66:c5:22:4d:e8:93:be:f7:6f:02:0f:6f:ae:b3:
c9:87:92:32:ff:ed:ac:5a:b8:ad:94:6e:06:bf:64:6e:d1:27:
8b:c6:5d:97:8f:a6:1e:1a:40:2d:a4:8f:ff:65:72:60:d8:00:
5d:b8:4b:69:8f:ca:2e:3e:5c:81:ac:cf:91:2e:e7:a2:4c:db:
dc:5a:4b:70:12:ea:66:f4:a2:05:a2:2e:27:7e:61:6c:5d:1d:
97:09:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:04 2026 by rpki-client